$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: 9HZlK1IiGl58RJyLmCBHnW+cou30EnsRhn8vw6Hm2dw= Subject key identifier: 2A:3A:30:3D:42:06:0D:8E:B1:D1:07:A5:A1:BA:49:B5:3A:17:42:11 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 655206C542045BAB5E46718EB320188B943F181D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 019E Signing time: Wed 02 Jul 2025 02:21:48 +0000 Manifest this update: Wed 02 Jul 2025 02:16:48 +0000 Manifest next update: Sat 05 Jul 2025 13:31:48 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: dJgjcEXEZ2yCe3FfAK9KdK27gQD1MFrxqgCLPrv9M5U=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:52:06:c5:42:04:5b:ab:5e:46:71:8e:b3:20:18:8b:94:3f:18:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Jul 2 02:16:48 2025 GMT Not After : Jul 5 13:31:48 2025 GMT Subject: CN=2A3A303D42060D8EB1D107A5A1BA49B53A174211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:37:8b:65:3d:02:c6:53:3c:95:9e:f7:46: ba:11:c0:af:8c:bc:8b:b5:38:0d:3a:17:b4:ec:42: 22:f2:03:82:2c:ab:b7:be:dc:14:3a:07:65:2a:6c: d0:e6:89:ba:08:38:53:78:7e:4d:8a:ec:0a:83:39: 70:58:73:a0:eb:8e:ac:89:08:80:39:4a:5f:1c:d1: a8:cc:40:b8:90:da:d5:56:76:96:6f:f5:7a:14:4d: 94:75:70:0c:16:86:c5:2c:97:ef:ef:14:fa:bf:0d: 4e:92:74:b8:0e:e8:90:93:70:27:cb:58:da:bd:54: 26:85:9c:5b:7d:b9:61:20:3b:a0:ee:19:53:04:ce: 7a:38:0a:79:92:91:4c:13:30:49:f0:91:bd:c3:3c: 1a:54:ca:dc:34:3b:f6:70:02:7e:63:e4:2e:c7:be: c5:67:99:7c:c8:22:24:04:37:3f:36:5f:ed:52:5c: 2d:e1:62:96:f7:bf:8d:c0:4e:69:d6:89:1d:f4:a3: 66:d7:7d:f8:90:f3:ec:44:8d:80:bf:25:9b:ef:62: 88:2c:7f:d0:52:bd:9c:7d:9a:83:e8:52:2a:22:be: fd:9c:d0:9d:c0:55:64:4a:42:0e:9e:3c:94:55:d2: 7d:45:fb:6f:b5:39:94:eb:1c:8b:16:6e:8c:a2:fa: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:30:3D:42:06:0D:8E:B1:D1:07:A5:A1:BA:49:B5:3A:17:42:11 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:93:40:63:fa:cc:79:c8:0b:bc:d8:85:6e:b2:4e:0d:6f:47: 4e:8c:8d:f6:0a:60:bf:93:58:ad:5f:3c:23:96:89:31:4d:bc: ab:3c:75:a5:9a:43:34:e1:7b:51:56:88:e4:a1:89:b3:9a:d6: f0:46:b5:8e:07:5f:19:54:e2:08:f5:64:64:53:d3:01:44:2f: 64:7f:62:88:b8:75:7a:a4:f0:9e:30:18:ec:db:93:26:de:08: 1c:ad:4b:a9:36:0e:e7:28:00:67:67:01:b8:24:e8:89:d8:4e: d2:0e:3e:2a:c1:5e:55:67:5c:a4:cc:e9:d2:ef:98:f0:fa:88: 91:78:42:12:0b:f4:13:3d:9c:1b:98:81:14:49:dd:18:3d:8b: 67:b7:10:92:e1:61:bb:98:27:af:f3:d8:15:e9:be:6f:13:f8: f3:a4:d1:18:7b:71:64:c4:25:1d:3e:d4:01:00:a7:7f:d3:8c: 07:14:5c:c4:00:23:66:e6:71:01:22:ea:96:cf:4e:8b:99:41: e6:78:8c:66:82:b9:87:d5:8c:c9:c7:71:bd:e6:a7:1f:b3:00: 7d:7f:bc:fb:f0:50:6e:a0:7b:55:56:1f:f4:4a:59:01:59:96: 66:28:94:f3:6a:a8:7a:f5:8a:e3:78:4e:25:f7:4c:68:ae:fd: 27:3c:57:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVIGxUIEW6teRnGOsyAYi5Q/GB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA3MDIwMjE2NDhaFw0yNTA3MDUxMzMxNDhaMDMxMTAvBgNV BAMTKDJBM0EzMDNENDIwNjBEOEVCMUQxMDdBNUExQkE0OUI1M0ExNzQyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UTeLZT0CxlM8lZ73RroRwK+M vIu1OA06F7TsQiLyA4Isq7e+3BQ6B2UqbNDmiboIOFN4fk2K7AqDOXBYc6DrjqyJ CIA5Sl8c0ajMQLiQ2tVWdpZv9XoUTZR1cAwWhsUsl+/vFPq/DU6SdLgO6JCTcCfL WNq9VCaFnFt9uWEgO6DuGVMEzno4CnmSkUwTMEnwkb3DPBpUytw0O/ZwAn5j5C7H vsVnmXzIIiQENz82X+1SXC3hYpb3v43ATmnWiR30o2bXffiQ8+xEjYC/JZvvYogs f9BSvZx9moPoUioivv2c0J3AVWRKQg6ePJRV0n1F+2+1OZTrHIsWboyi+j9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjowPUIGDY6x0QelobpJtToXQhEwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSTQGP6zHnIC7zYhW6yTg1vR06MjfYKYL+T WK1fPCOWiTFNvKs8daWaQzThe1FWiOShibOa1vBGtY4HXxlU4gj1ZGRT0wFEL2R/ Yoi4dXqk8J4wGOzbkybeCBytS6k2DucoAGdnAbgk6InYTtIOPirBXlVnXKTM6dLv mPD6iJF4QhIL9BM9nBuYgRRJ3Rg9i2e3EJLhYbuYJ6/z2BXpvm8T+POk0Rh7cWTE JR0+1AEAp3/TjAcUXMQAI2bmcQEi6pbPTouZQeZ4jGaCuYfVjMnHcb3mpx+zAH1/ vPvwUG6ge1VWH/RKWQFZlmYolPNqqHr1iuN4TiX3TGiu/Sc8V8g= -----END CERTIFICATE-----Generated at Thu Jul 3 13:35:59 2025 by rpki-client